|
version 1.1, 2014/07/18 03:43:11
|
version 1.5, 2021/03/13 20:43:28
|
|
Line 89 Finish installing your server, reboot it
|
Line 89 Finish installing your server, reboot it
|
| </p> |
</p> |
| <h3>Firewall Configuration</h3> |
<h3>Firewall Configuration</h3> |
| <p> |
<p> |
| LON-CAPA uses the traditional iptables package instead of the recent Firewalld, included for the |
Starting with LON-CAPA 2.11.3 you have the option of using either firewalld or iptables to |
| first time with CentOS 7. Accordingly, you should install iptables-services, disable firewalld, |
manage the Firewall on your CentOS 7 server/VM, as both are compatible with LON-CAPA's |
| and enable iptables. |
port management.</p> |
| |
<p>Enable access to standard web server ports (i.e., http and https) as follows, if |
| |
using firewalld::</p> |
| |
<pre> |
| |
systemctl enable firewalld |
| |
systemctl start firewalld |
| |
firewall-cmd --zone=public --permanent --add-service=http |
| |
firewall-cmd --zone=public --permanent --add-service=https |
| |
firewall-cmd --reload |
| |
</pre> |
| |
<p>If you prefer to use the traditional iptables package instead of the default firewalld, |
| |
you will need to install iptables-services, disable firewalld, enable iptables, and then |
| |
use the system-config-firewall-tui tool to configure the Firewall. |
| |
</p> |
| <pre> |
<pre> |
| yum install iptables-services |
yum install iptables-services |
| systemctl mask firewalld |
systemctl mask firewalld |
|
Line 100 systemctl enable ip6tables
|
Line 113 systemctl enable ip6tables
|
| systemctl stop firewalld |
systemctl stop firewalld |
| systemctl start iptables |
systemctl start iptables |
| systemctl start ip6tables |
systemctl start ip6tables |
| yum install wget |
|
| rpm --import http://install.loncapa.org/versions/centos/RPM-GPG-KEY-loncapa |
|
| wget http://install.loncapa.org/versions/centos/7/system-config-firewall-tui-1.2.29-10.el7.noarch.rpm |
|
| yum localinstall system-config-firewall-tui-1.2.29-10.el7.noarch.rpm |
|
| </pre> |
</pre> |
| <p> |
<p> |
| The system-config-firewall-tui tool should be used to configure the Firewall. |
Install the system-config-firewall-tui package and configure the Firewall. |
| </p> |
</p> |
| <pre> |
<pre> |
| |
yum install system-config-firewall-tui |
| system-config-firewall-tui |
system-config-firewall-tui |
| </pre> |
</pre> |
| <ol> |
<ol> |
|
Line 121 system-config-firewall-tui
|
Line 131 system-config-firewall-tui
|
| |
|
| <h2>4. <a name="upd">Update your system</a></h2> |
<h2>4. <a name="upd">Update your system</a></h2> |
| <p> |
<p> |
| |
If you are using 64-bit architecture enable access to the EPEL repository. Execute: |
| |
</p> |
| |
<pre> |
| |
yum install epel-release |
| |
</pre> |
| |
<p> |
| Update your system to the latest versions of the system software using yum. |
Update your system to the latest versions of the system software using yum. |
| </p> |
</p> |
| <pre> |
<pre> |
|
Line 130 yum update
|
Line 146 yum update
|
| Reboot your system before continuing with the installation. |
Reboot your system before continuing with the installation. |
| </p> |
</p> |
| <p> |
<p> |
| Retrieve the centos7_loncapa_yum file from the LON-CAPA install site: |
Retrieve the centos7_loncapa_yum file from the LON-CAPA install site and install |
| |
using the following commands: |
| </p> |
</p> |
| <pre> |
<pre> |
| |
yum install wget |
| |
rpm --import http://install.loncapa.org/versions/centos/RPM-GPG-KEY-loncapa |
| wget http://install.loncapa.org/versions/centos/7/centos7_loncapa_yum.conf |
wget http://install.loncapa.org/versions/centos/7/centos7_loncapa_yum.conf |
| |
mv /etc/yum.conf /etc/yum.conf.backup |
| |
cp centos7_loncapa_yum.conf /etc/yum.conf |
| |
yum update |
| </pre> |
</pre> |
| <p> |
<p> |
| Install the centos7_loncapa_yum.conf |
Verify the required repositories are enabled: |
| </p> |
</p> |
| <pre> |
<pre> |
| mv /etc/yum.conf /etc/yum.conf.backup |
yum repolist enabled |
| cp centos7_loncapa_yum.conf /etc/yum.conf |
|
| yum update |
|
| </pre> |
</pre> |
| |
<p> |
| |
The list of enabled repos should be as follows (where $basearch = x86_64 or i386). The epel repo will be absent if you are using 32-bit architecture. |
| |
</p> |
| |
<table style="border: 0px; border-collapse: collapse;"> |
| |
<tr><th>repo id</th><th>repo name</th></tr> |
| |
<tr><td>base/7/$basearch</td><td>CentOS-7 - Base<td></tr> |
| |
<tr><td>epel/x86_64</td><td>Extra Packages for Enterprise Linux 7 - x86_64</td></tr> |
| |
<tr><td>extras/7/$basearch</td><td>CentOS-7 - Extras</td></tr> |
| |
<tr><td>loncapa-updates-basearch/7/$basearch</td><td>CentOS 7 LON-CAPA $basearch Updates</td></tr> |
| |
<tr><td>loncapa-updates-noarch/7</td><td>CentOS 7 LON-CAPA noarch Updates</td></tr> |
| |
<tr><td>updates/7/$basearch</td><td>CentOS-7 - Updates<td></tr> |
| |
</table> |
| |
|
| <h3>Configure SELinux</h3> |
<h3>Configure SELinux</h3> |
| <p> |
<p> |
![[BACK]](/icons/back.gif){kind=icon}
Return to centos7_install.frag CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [LON-CAPA] / doc / build